Chapter 6 of 9
Module 6: Regulatory and Policy Landscape – What Clients Need to Know
Get an up-to-date, high-level view of key regulatory themes around blockchain and crypto so you can frame conversations carefully (without giving legal advice).
Step 1 – Why Regulation Matters in Client Conversations
In this 15‑minute module, you’ll learn how to talk about blockchain and crypto regulation credibly but safely (i.e., without giving legal or tax advice).
Why this matters for you (non‑lawyer, non‑tax advisor):
- Clients often ask: “Is this legal?” or “How is this regulated?”
- The landscape is changing quickly (especially since 2023–2025).
- You need to show awareness of key themes, flag risks, and signpost clients to professional advice.
Your role in client conversations:
- ✅ Explain high‑level regulatory themes and where regulators are focused.
- ✅ Use current terminology (e.g., MiCA in the EU, SEC/CFTC split in the US).
- ✅ Emphasize that rules differ by jurisdiction and are still evolving.
- ❌ Do not interpret laws, classify specific tokens, or give tax opinions.
Link to previous modules:
- From Module 4 (use cases): Regulation often determines which use cases are realistic.
- From Module 5 (risks): Regulatory uncertainty is a core risk you should be able to explain.
Keep in mind: today is January 2026, so we’ll reference major developments up to around 2025 and highlight that details may keep changing.
Step 2 – What Regulators Care About: The Big Buckets
Across jurisdictions, regulators tend to worry about similar core issues, even if the legal details differ.
You can frame it to clients as “Most regulators focus on four big buckets”:
- Consumer & investor protection
- Misleading marketing of tokens and NFTs
- Loss of funds from hacks, platform failures, or poor safekeeping
- Conflicts of interest at exchanges and platforms
- Anti‑Money Laundering (AML) & Counter‑Terrorist Financing (CTF)
- Use of crypto to move illicit funds across borders
- Mixing services and privacy tools that obscure the source of funds
- Market integrity & financial stability
- Market manipulation, wash trading, insider trading in tokens
- Stablecoins or large platforms that could impact the wider financial system if they fail
- Tax compliance & reporting
- Unreported gains from trading or DeFi yields
- Difficulty tracking cross‑platform activity
Client‑friendly phrasing you can use:
> “Globally, regulators are less focused on the technology itself and more on how it affects consumers, crime, markets, and tax compliance.”
You don’t need to know every law. You do need to recognize when a client’s idea touches one or more of these buckets and encourage them to get specialist advice.
Step 3 – How Crypto Assets Are Classified (High‑Level View)
A core regulatory question is: “What is this token legally?” Different answers trigger different rules.
3.1 Common categories regulators use
- Securities / investment products
- Tokens that look like shares, bonds, or investment contracts (e.g., promise of profit from the efforts of a team).
- In the US, the SEC often applies the Howey test to decide if something is a security.
- Consequence: issuing or trading such tokens may trigger securities laws (disclosure, registration, licensed intermediaries).
- Commodities or other assets
- In the US, the CFTC views major tokens like Bitcoin (and often Ether) as commodities.
- Crypto derivatives (futures, options) can fall under commodity derivatives regulation.
- Payment / e‑money / stablecoins
- Tokens pegged to fiat (e.g., USD‑backed stablecoins) often trigger payments, e‑money, or stablecoin‑specific rules.
- Example: the EU’s Markets in Crypto‑Assets Regulation (MiCA) (entered into force in 2023, main rules phasing in through 2024–2025) creates detailed regimes for asset‑referenced tokens and e‑money tokens.
- Utility / access tokens
- Tokens providing access to a network, service, or game.
- Even if called a “utility token,” it can still be treated as a security or other regulated instrument depending on its economic reality.
3.2 Safe way to explain this to clients
Use language like:
> “Regulators don’t accept labels at face value. They look at what the token actually does and how it is sold. That determines whether it’s treated as a security, a payment instrument, a commodity, or something else. Specific classification is a legal question that your counsel should address.”
This shows understanding without making a classification decision yourself.
Step 4 – Mini Case Studies: How Classification Changes the Rules
Use these simple scenarios in your head when clients describe a project.
Example A – Loyalty token
A retailer wants to issue a token that customers earn through purchases and can redeem for discounts.
- No profit promise, just discounts and perks.
- Main issues: consumer protection, unfair terms, maybe e‑money/payment rules if tokens are widely transferable or redeemable for cash.
- Likely not a security in many jurisdictions, but details matter.
How you might respond:
> “This looks closer to a loyalty or rewards program, but the exact design could still trigger payments or e‑money rules. You should have counsel review the token’s features and your redemption model.”
---
Example B – Token sold to fund a project
A startup sells tokens that give holders a share of future revenues from a new platform.
- Clear expectation of profit from the team’s efforts.
- In many jurisdictions, this raises securities law issues.
How you might respond:
> “Because the token is linked to future revenues and your team’s performance, many regulators might view it similarly to a security or investment product. You’ll want specialized legal advice on how to offer and trade it.”
---
Example C – USD‑pegged stablecoin
A fintech wants to issue a USD‑backed stablecoin, redeemable 1:1, with reserves in bank accounts.
- Likely to trigger payments / e‑money / stablecoin‑specific rules.
- In the EU, MiCA and the Payment Services framework are central. In the US, multiple regulators (state money transmitter laws, OCC, Fed, etc.) may be relevant.
How you might respond:
> “Stablecoins now face much more detailed and evolving regulation, especially in the EU and US. You’ll need to plan for licensing, reserve requirements, and ongoing supervision. That’s something a regulatory specialist must map out for you.”
Notice how each response:
- Shows awareness of regulatory themes, but
- Stops short of definitive legal classification or advice.
Step 5 – KYC, AML, and the Travel Rule (Client‑Level View)
Since around 2019, global standards have pushed crypto service providers towards bank‑like AML expectations.
5.1 Key concepts
- KYC (Know Your Customer)
- Verifying the identity of customers: name, date of birth, address, ID documents.
- Ongoing monitoring for suspicious behavior.
- AML / CTF obligations
- Risk assessments; customer due diligence.
- Reporting suspicious transactions to authorities.
- Screening against sanctions lists.
- FATF “Travel Rule” for Virtual Asset Service Providers (VASPs)
- The Financial Action Task Force (FATF) updated its standards to cover virtual assets and VASPs.
- The Travel Rule requires certain originator and beneficiary information to “travel” with transfers above a threshold between VASPs.
- Many countries have been implementing or tightening these rules through 2023–2025.
5.2 What this looks like in practice
- Centralized exchanges asking for ID, source‑of‑funds, and source‑of‑wealth details.
- Extra checks or restrictions when sending to self‑hosted (unhosted) wallets.
- Delays or blocks on transfers involving high‑risk jurisdictions or sanctioned addresses.
5.3 How to talk about this with clients
You might say:
> “Most regulated crypto platforms now operate with bank‑style KYC and AML controls, including the Travel Rule, which means they share certain sender/receiver details for larger transfers. If your business touches customer funds, assume you’ll need robust compliance processes and specialist advice.”
This shows you understand the direction of travel without advising on how a specific firm should implement AML.
Step 6 – Tax: What You Can Safely Say (Without Giving Advice)
Tax treatment of crypto has diverged by country, but some high‑level themes are fairly consistent.
6.1 Common tax themes
- Disposals (selling crypto for fiat, swapping one token for another, spending crypto on goods/services) often create taxable events (e.g., capital gains or income), depending on jurisdiction.
- Mining, staking, and yield‑earning can be taxed as income when received, and later as gains/losses when disposed.
- Record‑keeping is critical: timestamps, cost basis, and transaction history.
- Many countries have introduced or are introducing reporting obligations for platforms and, in some cases, cross‑border information sharing.
6.2 Safe client‑facing statements
You can say things like:
> “In many jurisdictions, crypto transactions can trigger capital gains or income tax, even when you’re just swapping one token for another. The details vary a lot by country, so you should work with a tax advisor who understands digital assets.”
> “Because the rules and reporting requirements are changing quickly, it’s important to keep good records of all your crypto activity and get professional tax advice before launching a product or making large trades.”
Avoid:
- Calculating a client’s tax liability.
- Stating that a specific transaction is “tax‑free” or “fully deductible”.
Your goal is to raise awareness and encourage professional support, not to replace a tax advisor.
Step 7 – Global Trends: US, EU, and Other Key Jurisdictions
You don’t need to memorize every law, but you should recognize major themes in top markets.
7.1 United States (as of 2025)
- Fragmented oversight: SEC, CFTC, FinCEN, OFAC, state regulators, banking agencies.
- Ongoing debate over whether many tokens are securities; multiple enforcement actions against exchanges, issuers, and DeFi projects.
- Strong focus on:
- Investor protection and truthful disclosures.
- AML/CTF and sanctions compliance.
- Stablecoin regulation (federal and state level proposals and guidance).
How to phrase it:
> “In the US, the environment is active and enforcement‑driven, with ongoing debates about which tokens count as securities. Projects often face regulatory uncertainty and need strong legal support.”
---
7.2 European Union – MiCA and beyond
- The Markets in Crypto‑Assets Regulation (MiCA) entered into force in 2023, with major provisions phasing in across 2024–2025.
- MiCA creates EU‑wide rules for:
- Crypto‑asset service providers (CASPs) (e.g., exchanges, custodians).
- Asset‑referenced tokens and e‑money tokens (including many stablecoins).
- Aim: harmonized rules across EU member states, more legal certainty than in the US.
How to phrase it:
> “In the EU, MiCA is creating a more uniform licensing and conduct framework for crypto service providers and certain tokens, especially stablecoins. Firms still need local legal advice, but there’s now a clearer EU‑level rulebook.”
---
7.3 Other major themes (UK, Asia, etc.)
- UK: Moving toward a tailored regime for crypto asset activities, with strong focus on consumer protection, promotions, and stablecoins.
- Singapore, Hong Kong, UAE, others: Positioning as regulated hubs, often with licensing regimes for exchanges and clear AML expectations.
- Many developing countries: Mixture of cautious experimentation, strict bans, or sandbox approaches.
Safe summary:
> “Globally, the trend is toward more formal licensing, stricter AML, and clearer rules for stablecoins and service providers, but details differ a lot. Cross‑border projects especially need multi‑jurisdictional legal input.”
Step 8 – Practice: Staying in Your Lane (Role‑Boundary Exercise)
Read each situation and mentally draft a safe response that shows awareness but avoids legal/tax advice. Then compare with the example answer.
---
Scenario 1 – “Is my token a security?”
A founder says: “We’re selling tokens to early users. We’re not a security, right?”
Your draft response (think for 30–45 seconds).
Example safe response:
> “Whether a token is treated as a security depends on the detailed design and how it’s offered. Regulators look at the economic reality, not just the label. I can’t classify it for you, but I strongly recommend speaking with a lawyer who specializes in digital asset regulation.”
---
Scenario 2 – “Can I avoid tax by using DeFi?”
A client asks: “If I use DeFi instead of a centralized exchange, I don’t pay tax, right?”
Your draft response.
Example safe response:
> “Using DeFi doesn’t make tax obligations disappear. In many countries, swaps, sales, and yield can all be taxable events. I’m not a tax advisor, so I can’t comment on your specific situation, but you should discuss this with a tax professional who understands crypto.”
---
Scenario 3 – “We don’t need KYC if it’s on‑chain, right?”
A startup says: “Because we’re fully on‑chain, we can skip KYC.”
Your draft response.
Example safe response:
> “Regulators increasingly apply KYC/AML expectations to crypto businesses, even if the activity is on‑chain. Whether you’re a regulated ‘virtual asset service provider’ depends on your exact role. You’ll need a compliance and legal assessment to understand your obligations.”
Use these patterns in real conversations to signal awareness, avoid over‑stepping, and encourage professional advice.
Step 9 – Quick Check: Regulatory Themes
Test your understanding of the main regulatory concerns.
Which combination best captures the **main regulatory concerns** around blockchain and crypto across major jurisdictions?
- Technology performance, open‑source licensing, and UI design
- Consumer/investor protection, AML/CTF, market integrity/financial stability, and tax compliance
- Intellectual property, employment law, and data center energy contracts
Show Answer
Answer: B) Consumer/investor protection, AML/CTF, market integrity/financial stability, and tax compliance
Regulators globally focus on: (1) consumer and investor protection, (2) anti‑money laundering and counter‑terrorist financing, (3) market integrity and financial stability, and (4) tax compliance and reporting. Technology performance and UI design matter commercially but are not the core regulatory buckets.
Step 10 – Flashcard Review: Key Terms
Flip through these key terms to reinforce your understanding.
- MiCA (Markets in Crypto‑Assets Regulation)
- An EU regulation that entered into force in 2023 and creates a harmonized framework for crypto‑asset service providers and certain types of tokens (especially stablecoins) across EU member states, with major requirements phasing in through 2024–2025.
- Virtual Asset Service Provider (VASP)
- A term used by the Financial Action Task Force (FATF) for businesses that provide services like exchanging, transferring, or safeguarding virtual assets, and are subject to AML/CTF obligations including the Travel Rule.
- Travel Rule
- An AML requirement (extended by FATF to crypto) that certain identifying information about the sender and recipient must accompany transfers of funds or virtual assets between regulated entities above specified thresholds.
- Consumer / Investor Protection
- A regulatory objective focused on ensuring fair, transparent treatment of users and investors, including truthful marketing, appropriate disclosures, and safeguards against fraud and misuse of client assets.
- Market Integrity
- The goal of keeping markets fair and orderly by preventing manipulation, insider trading, and abusive practices that could distort prices or harm participants.
- KYC (Know Your Customer)
- Processes used by financial and crypto service providers to verify customer identity and assess risk, forming part of broader AML/CTF obligations.
- AML / CTF
- Anti‑Money Laundering and Counter‑Terrorist Financing: legal and regulatory frameworks designed to prevent the use of financial systems, including crypto, for laundering illicit funds or financing terrorism.
- Stablecoin
- A crypto asset designed to maintain a stable value, often pegged to a fiat currency like USD or EUR. Frequently subject to specific regulatory scrutiny around reserves, redemption rights, and systemic risk.
- Regulatory Perimeter
- The boundary that defines which activities, assets, and entities are covered by a regulator’s rules and supervision. Crypto projects often test or extend this perimeter.
Step 11 – Build Your Own Safe Disclaimer
Create a short, reusable statement you can use in client conversations to clarify your role.
Task (1–2 minutes):
- Open a note on your device.
- Draft 2–3 sentences that:
- State your non‑legal, non‑tax role.
- Emphasize that regulations are evolving.
- Encourage clients to seek specialist advice.
Example template you can adapt:
> “I can speak to industry trends and business implications of blockchain and crypto, but I’m not a legal or tax advisor. Regulations in this area are evolving quickly and vary by jurisdiction, so for any specific project or transaction you should get advice from qualified legal and tax professionals.”
Refine the wording until it feels natural for you. Use this statement whenever a conversation starts drifting into legal or tax interpretation.
Step 12 – Wrap‑Up: How to Sound Informed (Without Over‑Promising)
To close this module, focus on three habits in real client conversations:
- Name the themes, not the statutes
- Talk about consumer protection, AML, market integrity, and tax rather than citing specific sections of law (unless you are qualified and it’s your role).
- Flag uncertainty and change
- Acknowledge that rules are evolving, especially for DeFi, NFTs, and stablecoins.
- Use phrases like: “Based on recent trends…”, “As of now…”, “This area is under active regulatory development.”
- Signpost to experts early
- When a project involves public token sales, stablecoins, custody of client assets, or cross‑border operations, assume legal and tax input is essential.
If you remember nothing else from this module, remember this client‑ready line:
> “Regulation is one of the biggest drivers of risk and opportunity in crypto. I can help you think through the business implications, but the legal and tax details need to come from qualified professionals who track the latest rules in your jurisdictions.”
You now have a practical, up‑to‑date framework to discuss the regulatory and policy landscape credibly and safely.
Key Terms
- AML / CTF
- Anti-Money Laundering and Counter-Terrorist Financing: laws and regulations aimed at preventing the financial system, including crypto, from being used for crime or terrorism.
- Stablecoin
- A crypto asset designed to maintain a stable value, typically pegged to a fiat currency, and often subject to specific regulatory scrutiny.
- Travel Rule
- An AML requirement extended to crypto whereby information about the originator and beneficiary must accompany transfers of funds or virtual assets between regulated entities above certain thresholds.
- Market Integrity
- The condition of a market being fair, orderly, and free from manipulation or abusive practices.
- Regulatory Perimeter
- The boundary that defines which activities, assets, and entities fall under a regulator’s rules and supervision.
- KYC (Know Your Customer)
- Processes used to verify customer identity and assess risk as part of AML/CTF compliance.
- Consumer / Investor Protection
- A regulatory objective focused on ensuring fair treatment, adequate disclosure, and safeguards for users and investors.
- Crypto-asset Service Provider (CASP)
- A term used in the EU’s MiCA regulation for entities that provide services such as custody, trading platforms, exchange, or advice relating to crypto-assets, subject to licensing and conduct requirements.
- Virtual Asset Service Provider (VASP)
- A term from the Financial Action Task Force (FATF) for businesses that provide services such as exchanging, transferring, or safeguarding virtual assets, subject to AML/CTF requirements.
- MiCA (Markets in Crypto-Assets Regulation)
- An EU regulation that entered into force in 2023, creating a harmonized framework for crypto-asset service providers and certain types of tokens (especially stablecoins) across the EU, with key provisions rolling out through 2024–2025.